Query: All S3 buckets should log S3 data events in CloudTrail

Description

The collection of Simple Storage Service (AWS S3) data events helps in detecting any anomalous activity. The details include AWS account information that accessed an AWS S3 bucket, IP address, and time of event.

Query

Tables used in this query:

• aws_cloudtrail_trail
• aws_s3_bucket

Controls using this query:

• All S3 buckets should log S3 data events in CloudTrail

SQL